> ## Documentation Index
> Fetch the complete documentation index at: https://docs.opal.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Cursor

> Learn how to connect Opal with Cursor.

Opal's integration with Cursor allows you to gain visibility over access to Cursor Organizations and monitor user roles within your development environment.

With the Cursor integration, you can:

* View all users who have access with specific roles to your Cursor Organization
* Monitor usage
* Grant and revoke access to Cursor Origin repositories

## Supported resources

| Resource | Read | Grant and revoke access | Available in Risk Center |
| - | - | - | - |
| Cursor Organization | ✔️ | | ✔️ |
| Origin repository | ✔️ | ✔️ | |

Origin repositories are available only if you connect an Origin App in [step 2](#2-optional-connect-cursor-origin). Mirrored Origin repositories are not imported, because their access is managed on the mirror source.

## Supported roles

Opal syncs the following default Cursor roles:

* **Admin**: Full administrative access to the Cursor Organization
* **Member**: Standard member access to the organization
* **Unpaid Admin**: Administrative access without billing privileges

Opal also syncs any custom roles you have configured in your Cursor Organization.

Origin repositories support the following roles:

* **Read**
* **Write**
* **Admin**

Opal does not import repository grants that use a custom Origin permission policy.

## Cursor groups

When you connect Origin, Opal imports the following Cursor groups:

* **Team Members** and **Team Admins**: the built-in groups for your Cursor team. Opal derives their membership from your Cursor team members.
* Any custom Cursor group that has been granted access to an Origin repository.

You can grant and revoke a Cursor group's access to Origin repositories from Opal. Opal can't change the members of a Cursor group. Manage group membership in Cursor. Cursor doesn't expose the membership of custom groups, so Opal doesn't show it.

## Requirements

Before you begin, you must:

* Be an Opal Admin
* Have Admin permissions in your Cursor Organization
* To manage Origin repositories, have an Origin App installed on your Cursor team

## 1. Retrieve an API key in Cursor

To allow Opal to access your Cursor Organization, you must first create an Admin API key in Cursor:

1. Navigate to your Cursor Organization settings (**Settings** > **API Keys**)
2. Generate a new Admin API key

Save the key, as you won't be able to retrieve it later.

## 2. (Optional) Connect Cursor Origin

The Admin API key doesn't give Opal access to Origin. To manage Origin repositories, create an Origin App in Cursor and install it on your team. Then collect the following:

* The **App ID**
* The **Installation ID**
* The Ed25519 private signing key for the app, in PKCS#8 PEM format

You must provide all three values to enable Origin. If you leave all three blank, Opal manages only your Cursor Organization.

The app installation must be able to list the repositories you want Opal to manage. If it can't, the Origin validation fails.

You can also add these values later by editing your existing Cursor app and filling in **Origin App ID**, **Origin Installation ID**, and **Origin App Private Key**. Leave a field blank to keep its current value.

## 3. Create Cursor app in Opal

In Opal, go to **Inventory** > **+App** and select **Cursor**. Name your Cursor app, select an **App admin**, provide a description, and enter your **API Key** from step 1.

To enable Origin, also enter your **Origin App ID**, **Origin installation ID**, and **Origin App private key** from step 2. Opal validates the Origin connection by listing the repositories the app installation can access.

After you save the app, you can import your Cursor resources from **...** > **Import items**.

***


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.